Lucene search
K

CVE-2021-20035

🗓️ 27 Sep 2021 17:20:12Reported by sonicwallType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 175 Views

Improper neutralization of special elements in the SMA100 management interface allows remote authenticated attacker to inject arbitrary command

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2021-20035
27 Sep 202100:00
attackerkb
Circl
CVE-2021-20035
27 Sep 202122:34
circl
CISA KEV Catalog
SonicWall SMA100 Appliances OS Command Injection Vulnerability
16 Apr 202500:00
cisa_kev
CISA
CISA Adds One Known Exploited Vulnerability to Catalog
16 Apr 202512:00
cisa
CNNVD
Sonicwall SMA100 操作系统命令注入漏洞
24 Sep 202100:00
cnnvd
Cvelist
CVE-2021-20035
27 Sep 202117:20
cvelist
EUVD
EUVD-2021-7498
3 Oct 202520:07
euvd
NCSC
Vulnerabilities fixed in SonicWall SMA100 series
24 Sep 202100:00
ncsc
NVD
CVE-2021-20035
27 Sep 202118:15
nvd
OSV
CVE-2021-20035
27 Sep 202118:15
osv
Rows per page
NVD
Vulners
Node
sonicwallsma_200_firmwareRange<9.0.0.11-31sv
OR
sonicwallsma_200_firmwareRange10.2.0.010.2.0.8-37sv
OR
sonicwallsma_200_firmwareRange10.2.1.010.2.1.1-19sv
AND
Node
sonicwallsma_210_firmwareRange<9.0.0.11-31sv
OR
sonicwallsma_210_firmwareRange10.2.0.010.2.0.8-37sv
OR
sonicwallsma_210_firmwareRange10.2.1.010.2.1.1-19sv
AND
Node
sonicwallsma_400_firmwareRange<9.0.0.11-31sv
OR
sonicwallsma_400_firmwareRange10.2.0.010.2.0.8-37sv
OR
sonicwallsma_400_firmwareRange10.2.1.010.2.1.1-19sv
AND
Node
sonicwallsma_410_firmwareRange<9.0.0.11-31sv
OR
sonicwallsma_410_firmwareRange10.2.0.010.2.0.8-37sv
OR
sonicwallsma_410_firmwareRange10.2.1.010.2.1.1-19sv
AND
Node
sonicwallsma_500vRange<9.0.0.11-31sv
OR
sonicwallsma_500vRange10.2.0.010.2.0.8-37sv
OR
sonicwallsma_500vRange10.2.1.010.2.1.1-19sv
[
  {
    "product": "SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0.10-28sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.0.7-34sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.0-17sv and earlier"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

31 Oct 2025 17:13Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.16.5
CVSS 26.8
EPSS0.12838
SSVC
175